Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/E7wiPInEht-zu-gG_gy_Z9sDius.roa
File:                     E7wiPInEht-zu-gG_gy_Z9sDius.roa (raw, json)
Hash identifier:          bh0mazX8O8HzyFGyAfuLAkAaIyxr79ZBjlP4kagXbYE=
Subject key identifier:   13:BC:22:3C:89:C4:86:DF:B3:BB:E8:06:FE:0C:BF:67:DB:03:8A:EB
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       02
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/E7wiPInEht-zu-gG_gy_Z9sDius.roa
Signing time:             Thu 27 Mar 2025 08:54:24 +0000
ROA not before:           Thu 27 Mar 2025 08:54:24 +0000
ROA not after:            Wed 18 Mar 2026 08:55:47 +0000
asID:                     131954
IP address blocks:        2401:55c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Mar 27 08:54:24 2025 GMT
            Not After : Mar 18 08:55:47 2026 GMT
        Subject: CN=13BC223C89C486DFB3BBE806FE0CBF67DB038AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:43:24:c5:44:98:9c:9d:f0:04:3f:a1:97:
                    e6:c2:0e:01:8a:fc:2f:af:e4:85:1c:44:93:51:2d:
                    39:36:df:1e:50:28:ce:64:a0:f0:80:a9:e4:f4:a2:
                    45:66:e4:73:56:a9:1c:e4:54:7e:3d:61:8e:f0:9b:
                    9c:ad:07:34:27:bb:f9:31:91:ab:17:97:5c:90:76:
                    a4:e7:92:2b:d1:89:e1:89:45:a3:1d:c9:fd:8d:09:
                    5c:87:45:be:8a:9e:4b:59:64:8f:8f:45:09:36:b1:
                    88:c9:e0:32:fa:28:21:e6:0b:df:d1:93:1d:bd:5f:
                    bb:b2:2f:c4:bd:8f:70:52:55:74:ce:4e:d9:a6:50:
                    6d:e4:4e:c3:50:35:27:08:bd:aa:1b:71:3d:e5:f1:
                    63:f4:00:ed:b2:39:31:f4:a5:20:fc:04:52:f3:c3:
                    0b:12:82:9e:d4:21:48:88:6d:b7:54:36:3c:08:52:
                    58:1b:0d:24:1d:bd:fa:31:2d:ad:b1:98:21:de:40:
                    91:2a:3e:66:b2:f7:36:3f:da:c5:e3:af:ad:96:84:
                    25:33:a8:a5:56:4a:9e:6c:00:4e:39:d4:4a:0e:35:
                    7e:c1:e8:d8:8a:28:00:bd:b6:8c:a2:df:f7:62:7f:
                    0a:cb:bd:08:c6:64:63:10:47:51:4a:2f:fc:8e:64:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BC:22:3C:89:C4:86:DF:B3:BB:E8:06:FE:0C:BF:67:DB:03:8A:EB
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/E7wiPInEht-zu-gG_gy_Z9sDius.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:05:a5:66:a4:74:3c:a7:4b:69:aa:5f:63:ab:13:84:37:
         f7:74:db:c8:2c:ac:55:5f:f3:3f:28:52:93:44:ff:5c:e1:f9:
         75:c2:01:03:65:21:91:4d:21:dc:e4:bc:28:b4:6c:dc:f0:26:
         4b:6f:dc:93:d9:a1:96:49:07:08:f7:f0:ba:de:19:96:fa:5f:
         80:ef:fb:75:64:ed:91:fd:8b:95:a6:dd:71:53:b4:a1:53:16:
         fa:4c:d5:e7:23:b8:48:44:85:ed:51:9b:ad:d2:d6:cf:05:86:
         d0:a7:2b:46:ce:4e:2d:b8:b9:87:e4:88:90:eb:f2:02:f5:57:
         8c:b3:5c:42:cc:69:78:21:1e:6d:21:3d:ab:ca:01:81:90:3b:
         d6:0e:48:08:32:a6:2c:32:77:60:7f:8e:18:89:bd:71:8f:00:
         18:36:9f:83:ef:9a:cf:07:f5:61:75:8e:74:74:50:6c:c0:fc:
         e9:79:01:c8:3d:95:fb:1e:72:0c:3d:99:7c:15:08:31:68:f8:
         31:d1:51:25:eb:db:de:9b:ea:31:5c:f4:09:b2:8e:07:71:e8:
         95:f5:9b:18:70:cb:0c:3f:97:9f:b7:79:0f:a1:57:17:6e:c7:
         cb:59:01:e5:2b:79:cd:5b:71:8c:a7:f3:1a:56:2b:5d:ab:a8:
         21:c8:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:51 2025 by rpki-client